Comment by CorpOverreach

You would think this is part of security 101 for these things...

And people wonder why big enterprises are scared of touching open source stuff.